A company is using a cloud IaaS environment. The security team wants to ensure that only the IT admin can create and manage virtual machines. Which configuration is the most appropriate?

Enable multi-factor authentication for the IT admin account

Assign the IT admin the 'Owner' role on the subscription

Create a custom role with permissions to create and manage virtual machines only

Use a shared account with administrative privileges for all IT staff

When configuring a cloud service, which practice is essential to ensure that users have only the permissions necessary to perform their job functions?

Configuring a virtual private network (VPN)

Using the principle of least privilege

Enabling multi-factor authentication (MFA)

A small business is moving its customer relationship management (CRM) system to a SaaS provider. The provider manages the application and the underlying servers, but the business must configure user access and ensure that customer data is encrypted at rest. Which security responsibility is the business accountable for in this shared responsibility model?

Updating the hypervisor that hosts the CRM virtual machines

Patching the CRM application and its operating system

Managing the physical security of the data center hosting the CRM

Configuring user access and data encryption settings for the CRM

A company stores critical business data in a cloud object storage service. The company wants to protect against accidental deletion and ransomware attacks. Which combination of data protection techniques should be implemented?

Store data in a single region without any versioning

Enable public read access and rely on the cloud provider's backup

Use only client-side encryption and store keys in the same bucket

Enable versioning and configure object lock with retention policies

A company stores critical business documents in a cloud storage service. The company wants to ensure that the documents are available if the cloud provider experiences an outage. Which strategy is the most appropriate?

Enable versioning on the storage service

Create a backup in a different cloud region or provider

Encrypt the documents with a customer-managed key

Use a shared access signature (SAS) to grant access to the documents

EC-CouncilCertified Secure Computer User

Domain 4Objective 2

Securing the Cloud CSCU Practice Questions (Page 8)

Part of the Mobile, Cloud, and Network Security domain, which makes up ~24% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~12–19 in this domain), expect 4–6 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)

42questions here

9free pages

6concepts

Questions 36–40

36application · medium
A company is using a cloud IaaS environment. The security team wants to ensure that only the IT admin can create and manage virtual machines. Which configuration is the most appropriate?
Select an answer first
37foundation · easy
When configuring a cloud service, which practice is essential to ensure that users have only the permissions necessary to perform their job functions?
Select an answer first
38application · medium
A small business is moving its customer relationship management (CRM) system to a SaaS provider. The provider manages the application and the underlying servers, but the business must configure user access and ensure that customer data is encrypted at rest. Which security responsibility is the business accountable for in this shared responsibility model?
Select an answer first
39application · medium
A company stores critical business data in a cloud object storage service. The company wants to protect against accidental deletion and ransomware attacks. Which combination of data protection techniques should be implemented?
Select an answer first
40application · medium
A company stores critical business documents in a cloud storage service. The company wants to ensure that the documents are available if the cloud provider experiences an outage. Which strategy is the most appropriate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSCU

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CSCU” is a trademark of its owner, used for identification only.